Re: Question on SSL certificate expiry

hostssl all <user> <ip> cert clientcert=1

Server Side SSL

postgres=# show ssl_cert_file ;

            ssl_cert_file             

--------------------------------------

 /data/server.cert

postgres=# show ssl_ca_file ;

                 ssl_ca_file                 

---------------------------------------------

 /data/ca-cert.pem

postgres=# show ssl_key_file ;

            ssl_key_file             

-------------------------------------

 /data/server.key

Client side SSL

export PGSSLROOTCERT="ca.pem"                                       

export PGSSLMODE="verify-full"                               

export PGSSLCERT="cert.pem"

export PGSSLKEY="cert.key" 

Thanks,

Nikhil